CVE-2011-4055 Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a long...
HighCVSS 9.3
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens tecnomatix factorylink | = 6.6.1 | No fix listed |
| Siemens tecnomatix factorylink | = 7.5.217 | No fix listed |
| Siemens tecnomatix factorylink | = 8.0.2.54 | No fix listed |
References
- 51266 vdb-entry
- www.us-cert.gov us-government-resource
- www.usdata.com patch vendor-advisory
- siemens-tecnomatix-bo(72117) vdb-entry